Extracted

• • Target

    PO23043_.EXE

  • Size

    313KB

  • MD5

    c1d14a0b29a7f3829d1361363ec2e9b1

  • SHA1

    11aa2f0448e47835ec84f975c13b9bdb762e7ad3

  • SHA256

    b2d76e91d736201b7e8fb9780594693cfc3106285a4886e9b40007fdd7e56359

  • SHA512

    e85b8aef71f36657e32c8e7c38b34834774e8ffc782bcb34f6e75e2634b6725ddae97dac7f9f73c09099d5a656bde10c5ef5bad068db951a7f48990dc98c916b

  • SSDEEP

    6144:zYa6/oSLCCe6xEoeELdWc9K4TDRnqoW/U6k33K9uuo:zYZre6xEohLNJTDRniG3XN

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2